Privacy Policy

The App stores all collected data only in a local database (SQLite) on your Mac. The Developer operates no server, and never views, stores, or collects your data.

Credentials for Google integration (OAuth tokens), and API keys for AI providers and the email delivery service, are encrypted and stored in the macOS Keychain via the safeStorage API.

The Gmail, Calendar, and Drive data itself, and your recorded screen activity, are stored unencrypted in the local database. How this data is protected is explained in detail in §03.

On Windows too, activity logs are stored only in the local database on your PC, and API keys are encrypted using the OS's protection mechanism (safeStorage).

The App collects the following data on your Mac only, and stores it locally.

• Active window's app name and window title (every 5 minutes)
• (Only when screen analysis is enabled) Text extracted from screenshots

If you explicitly connect a Google account, the App retrieves the following information in read-only mode. It never edits, deletes, or sends anything on your behalf.

• Gmail: number of sent/received messages, correspondents (email addresses), subjects, dates (gmail.readonly). Message bodies are never retrieved.
• Google Calendar: number of meetings, attendees (email addresses), titles, start/end times, recurrence, whether a Google Meet link is attached (calendar.readonly)
• Google Drive: file names, file types, action types (create, edit, move, rename, delete, etc.), the name of who performed the action, and timestamps (drive.activity.readonly). File content is never retrieved.

If you choose to enter your email address on the Setup screen, we use it only to send progress updates about data collection (1, 3, and 7 days after you start). Entering it is optional, and you can use the app without it. Your email address is not used for any other purpose and is never shared with third parties.

Data retrieved from Gmail, Calendar, and Drive qualifies as sensitive data under Google's definitions. This section describes, concretely and based on the actual implementation, how this data is protected.

Credentials for Google integration (OAuth tokens), and the API keys you enter for AI providers and the email delivery service, are encrypted and stored in the macOS Keychain via the safeStorage API.

The Gmail, Calendar, and Drive data itself (subjects, senders, meeting titles, file names, etc.), and your recorded screen activity, are stored in the local SQLite database without additional application-level encryption. Protection for this data instead relies on the access control described below, and, if enabled, macOS FileVault full-disk encryption.

The App runs only on your own Mac and has no server that receives the data it collects. There is no way for the Developer or any third party to access this data over a network (other than the transmission to your chosen AI provider described in §05).

The local database file (~/Library/Application Support/Mokchee/) is readable only by the macOS user account you are logged in as, under standard macOS file permissions. If the same Mac is shared by multiple user accounts, other accounts cannot access this data through normal permissions.

There is no automatic retention limit or automatic deletion for the Gmail/Calendar/Drive data or the screen activity records collected by the App. Data remains in the local database until you delete it.

From the Dashboard screen, the "Delete All Data" button lets you delete all stored data (activity logs, any Google-connected data, encrypted API keys, settings, and log files) at any time while the App is running. A confirmation screen is shown before deletion, and the action cannot be undone. Once deletion completes, the App quits, and the next launch starts from initial Setup. There is currently no way to selectively delete only specific items.

The encryption key itself (the "Safe Storage" item in the macOS Keychain) remains on the OS side, but the underlying data cannot be recovered. If you no longer need it after uninstalling, you can delete it manually from the Keychain. Note that the server-side license state described in §07 (a non-identifying identifier) is not affected by this in-app deletion.

• If the App cannot be launched normally and in-app deletion isn't possible, you can get the same result manually: in Finder, use Go → Go to Folder to open ~/Library/Application Support/Mokchee/, and delete the entire folder. Simply moving Mokchee.app to the Trash does not delete this data.
• To revoke the App's access to your Google account: visit Google's account permissions page (myaccount.google.com/permissions) and revoke Mokchee's access at any time. After revoking, the App can no longer retrieve new Gmail/Calendar/Drive data. Data already stored locally before revocation is not automatically deleted, so please also delete all data as described above if you want it removed.

Collected data is used solely to analyze work patterns and generate reports, including inefficiency discovery and automation suggestions. We never use it for advertising.

The App generates reports using your own API key (Anthropic Claude or OpenAI ChatGPT) — a "Bring Your Own Key" (BYOK) model.

When generating a report, the following is sent to your chosen AI provider:

• Screen activity: the recorded timeline of app names and window titles (every 5 minutes)
• Gmail: subject, sender/recipient, and date for each sent/received message. Only this metadata is sent — message bodies are never retrieved or sent.
• Calendar: meeting title, start/end time, and attendee count. Individual attendees' email addresses are not sent — only the count is.
• Drive: the list of file names, action types, and timestamps, plus a summary count of operations. File content is never retrieved or sent.
• In addition, aggregated per-app usage time is sent.

• API usage fees are billed directly to you by the AI provider, based on your own contract with them. The Developer does not collect, mark up, or otherwise handle this fee.
• The Developer cannot access the API key you enter. It is encrypted and stored in the Keychain, and used only to communicate with the AI provider.

We never sell or share your data with third parties. Other than the AI provider transmission described in the previous section, your Gmail, Calendar, and Drive data never leaves your Mac.

Separately, progress-update emails (see §02.3) are delivered using the email service Resend. This delivery only shares the recipient's email address and the notification text (e.g. app usage summaries) with Resend — it never includes your Gmail, Calendar, or Drive data.

Payment for the paid tier is processed by Stripe, Inc. Information you enter on the checkout screen is collected and held directly by Stripe, and is never stored on the Developer's own server.

The only things the Developer's server stores are a random license ID generated by the App (a non-identifying identifier) and a "paid" status flag. It never stores your name, email address, Stripe customer ID, payment ID, or device identifier.

License state is stored in Upstash (Redis), and the website runs on Vercel. License state is kept with no expiration. Vercel may collect standard access logs (such as source IP). We also use Google Analytics to understand how this site is used. Google Analytics uses cookies for measurement, and the information collected is handled in accordance with Google's Privacy Policy.

Connecting Google services such as Calendar is an optional feature. Retrieved data is used only for report generation.

Google integration is currently not offered (pending the required authentication review). When integration is enabled, you can grant or revoke access at any time from within the app. If and when integration is re-enabled, we will add the scope and purpose of data retrieved to this policy and announce it before re-enabling.

The App's use of Google Workspace APIs (Gmail, Calendar, Drive) complies with the Google API Services User Data Policy, including the Limited Use requirements.

This service is primarily intended for users in Japan. If you reside in a region where the EU General Data Protection Regulation (GDPR) applies, the service is not currently intended for your use.

Data sent to AI providers (Anthropic, OpenAI) is processed on their servers, primarily located in the United States.

For questions about this policy, please contact us at info.kizna.ai@gmail.com.

This policy may be revised as features are added or changed. Significant changes will be announced within the App or on this page.